CVE-2021-36624

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-07-30

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Phone Shop Sales Management System (Phone Shop Sales Management System Project)

References

• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624
• https://www.exploit-db.com/exploits/50105